Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in wwandsvn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wptask (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn2accxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn1xyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-0svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-extra5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp887 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-2fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-1hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-1git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wpact2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wphra (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp925 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp944 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wphra2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-extra0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn3accxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-extra4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-0hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-extra1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-2svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wpment2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp924 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-1fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-extra3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wphimp2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wpfox (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-2git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-2bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn3xyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-1svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-2mod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn2xyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-0fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wphraA (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-1mod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wpment (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-0mod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-0git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wphimp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-2hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-1bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wpact (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-extra2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn1accxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprox-c217-0bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wpfoxrev (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp941 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5prnotxt2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnumghplcqou (RubyGems)
1 compromised version
Page 29 of 158